Re: WIP: Column-level Privileges

Поиск
Список
Период
Сортировка
От Stephen Frost
Тема Re: WIP: Column-level Privileges
Дата
Msg-id 20081102125340.GT4452@tamriel.snowman.net
обсуждение исходный текст
Ответ на Re: WIP: Column-level Privileges  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Stephen Frost <sfrost@snowman.net> writes:
> > ... A case I just realized might be an issue is
> > doing a 'select 1 from x;' where you have *no* rights on x, or any
> > columns in it, would still get you the rowcount.
>
> Well, if you have table-level select on x, I would expect that to work,
> even if your privs on every column of x are revoked.  If the patch
> doesn't get this right then it needs more work ...

Table-level select on x is equivilant to having column-level select on
every column, per the spec.  The issue here, that I'm planning to fix
shortly, is that you could get a rowcount without having table-level or
column-level select rights on the table.
Thanks,
    Stephen

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Martijn van Oosterhout
Дата:
Сообщение: Re: Well done, Hackers
Следующее
От: Stephen Frost
Дата:
Сообщение: Re: WIP: Column-level Privileges